Severim kendisini...
(PHP Fusion'un maincore.php sinden....)
// Prevent any possible XSS attacks via $_GET.
if (stripget($_GET)) {
die("Prevented a XSS attack through a GET variable!");
}
// Prevent any possible XSS attacks via $_GET.
function stripget($check_url) {
$return = false;
if (is_array($check_url)) {
foreach ($check_url as $value) {
if (stripget($value) == true) {
return true;
}
}
} else {
$check_url = str_replace(array("\"", "\'"), array("", ""), urldecode($check_url));
if (preg_match("/<[^<>]+>/i", $check_url)) {
return true;
}
}
return $return;
}